Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jtgy7hV3Yfz3cRo1gfw4dW54nsA.roa
File: jtgy7hV3Yfz3cRo1gfw4dW54nsA.roa (raw, json)
Hash identifier: 7ujNms2rxzv6CC2Ck1A8sOXk1BOkPAeMb6oeHIsfgd0=
Subject key identifier: 8E:D8:32:EE:15:77:61:FC:F7:71:1A:35:81:FC:38:75:6E:78:9E:C0
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CC34891253B566CC9AE0292BBD1448A5D
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jtgy7hV3Yfz3cRo1gfw4dW54nsA.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142549
IP address blocks: 2a0d:2686::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:91:25:3b:56:6c:c9:ae:02:92:bb:d1:44:8a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ed832ee157761fcf7711a3581fc38756e789ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:dc:e0:83:2c:b5:21:9f:b9:c5:c4:a3:9b:
d4:f7:29:4c:59:2a:85:a4:b6:a4:9c:37:22:d1:a4:
a2:17:4b:95:25:9c:89:fd:8c:9d:02:86:7c:38:37:
8e:83:0e:db:bf:ac:93:27:a1:93:c8:f5:8f:66:11:
b8:94:01:13:13:82:6a:89:30:e0:89:cc:6d:a4:f4:
57:ec:21:4b:72:15:55:ad:d8:2d:64:35:ee:ac:9c:
83:e8:d5:08:89:54:15:64:e9:5d:3a:df:e1:3e:79:
d6:5c:3c:ed:72:d1:19:a1:2e:da:30:3c:38:ec:12:
b5:ab:a5:11:80:66:f7:43:2a:85:27:b0:a3:f3:56:
73:b9:3e:05:fc:ed:32:bf:73:78:64:6d:6f:bb:39:
de:8f:eb:85:28:65:be:dd:62:fc:b4:4d:00:92:c1:
a8:4f:da:9d:6c:7a:bd:0d:36:62:1c:ec:9d:36:de:
c5:a3:e8:84:bd:7f:f9:3a:63:64:a3:7a:54:6c:86:
f2:22:b3:d3:37:c7:83:b0:b7:c5:ba:ff:20:f1:c5:
c4:74:c9:7d:10:d9:23:ec:9e:0d:f6:22:62:aa:6a:
a8:00:40:17:14:eb:09:ae:48:11:7f:90:01:83:7f:
35:5a:a5:fe:86:37:5c:d9:17:b7:97:7a:96:fc:f0:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D8:32:EE:15:77:61:FC:F7:71:1A:35:81:FC:38:75:6E:78:9E:C0
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jtgy7hV3Yfz3cRo1gfw4dW54nsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2686::/32
Signature Algorithm: sha256WithRSAEncryption
74:ee:05:a6:1b:23:88:c9:ed:d0:68:07:ff:c5:99:96:14:2d:
94:57:3b:b5:f4:65:75:35:1e:20:cf:51:f1:6a:96:80:0e:30:
cb:0e:3e:3d:72:95:a0:be:c0:22:2e:1c:0d:6a:1b:69:58:90:
00:9c:ed:cf:5a:78:15:85:de:90:eb:8a:9d:da:1e:f4:dc:63:
01:74:60:89:a2:eb:20:51:34:ac:28:90:27:27:e1:d8:c5:2a:
04:58:4a:b2:bc:a2:9a:51:90:c6:04:cd:9d:6f:2c:da:94:70:
8b:42:e0:dc:e8:38:91:4d:d0:e5:00:af:bd:3a:66:91:6b:af:
8a:60:a7:93:4a:40:a2:0a:22:f9:89:93:02:17:44:03:41:00:
16:f4:9d:9d:67:80:39:c7:4e:0b:5c:fb:fa:5c:31:1d:e2:22:
2d:b2:ca:52:d9:88:82:0b:ad:2d:3d:ae:be:73:f6:7b:95:a1:
bd:7e:08:52:bb:f2:f2:14:6d:7e:fb:23:e6:0e:38:3b:ae:fc:
0b:fd:a1:53:2b:c8:4c:13:fb:2f:5b:ee:67:32:ad:1d:a2:b4:
c5:9a:2d:d5:79:73:e4:26:f4:6b:ca:10:63:96:cc:01:21:dc:
ec:47:c9:10:26:db:9b:fc:d8:a1:a8:a5:3a:80:f6:58:b7:bb:
ac:6a:ef:1f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzDSJElO1Zsya4CkrvRRIpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjQwMTAxMDQyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWQ4MzJlZTE1Nzc2MWZjZjc3MTFhMzU4MWZjMzg3NTZlNzg5ZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwafc4IMstSGfucXEo5vU9ylMWSqF
pLaknDci0aSiF0uVJZyJ/YydAoZ8ODeOgw7bv6yTJ6GTyPWPZhG4lAETE4JqiTDg
icxtpPRX7CFLchVVrdgtZDXurJyD6NUIiVQVZOldOt/hPnnWXDztctEZoS7aMDw4
7BK1q6URgGb3QyqFJ7Cj81ZzuT4F/O0yv3N4ZG1vuznej+uFKGW+3WL8tE0AksGo
T9qdbHq9DTZiHOydNt7Fo+iEvX/5OmNko3pUbIbyIrPTN8eDsLfFuv8g8cXEdMl9
ENkj7J4N9iJiqmqoAEAXFOsJrkgRf5ABg381WqX+hjdc2Re3l3qW/PAzowIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFI7YMu4Vd2H893EaNYH8OHVueJ7AMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvanRneTdoVjNZZnozY1JvMWdmdzRkVzU0bnNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg0mhjAN
BgkqhkiG9w0BAQsFAAOCAQEAdO4FphsjiMnt0GgH/8WZlhQtlFc7tfRldTUeIM9R
8WqWgA4wyw4+PXKVoL7AIi4cDWobaViQAJztz1p4FYXekOuKndoe9NxjAXRgiaLr
IFE0rCiQJyfh2MUqBFhKsryimlGQxgTNnW8s2pRwi0Lg3Og4kU3Q5QCvvTpmkWuv
imCnk0pAogoi+YmTAhdEA0EAFvSdnWeAOcdOC1z7+lwxHeIiLbLKUtmIggutLT2u
vnP2e5WhvX4IUrvy8hRtfvsj5g44O678C/2hUyvITBP7L1vuZzKtHaK0xZot1Xlz
5Cb0a8oQY5bMASHc7EfJECbbm/zYoailOoD2WLe7rGrvHw==
-----END CERTIFICATE-----
Generated at Wed May 15 16:32:32 2024 by rpki-client on console-ams.rpki-client.org